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Amendments to the Claims: 

This listing of claims will replace ail prior versions and listings of claims i 

application: 



Listing of Claims: 

What is claimed is 



What is claimed is: 

Claim 1. (currently amended) nr more computer-readable media havin P stored thereon an 
An application programming interface (API) for communication between an administration 
server and an authentication server, said API comprising com puter-executable instructions for: 

associating » n amP .. P ace wi t h <^.h nf a plurality of administration servers, each of the 
.^^ni^tinn se rv^ providing a s e rvie* relating to the associated namespace for one or more . 
users: 

receiving, by the authentication server, a request from oneof the administration servers, 
said authentication server and said administration server being connected via a data 
communication network, j o id administration serve* p rovid i ng u se t viee ncnnrin t nri wit h n 

n amespaee to one eh mere u^ r o en t hu Jal a b oh k ntinn network said authentication server 

having a database associated therewith storing authentication information for authenticating the 
users of the namespace service, said administration server being responsive to an administrator 
for issuing the request to said authentication server, said request specifying at least one action 
raring to the naff^ee associate^ ™th the administration server for managing the database to 
be performed h Y the authenti cation server to the namespace; 

verifying, by the authentication server, authority of the administration server to issue the 
request received by the authentication server; and 

performing, by the authentication server, the action specified by the received, verified 

request. 

Claim 2. (currently amended) The romputer-readable media API of claim 1, wherein the 
database associated with the authentication server stores authorization information relating to the 
administration server and wherein verifying the authority of the administration server to issue the 
request comprises identifying the administration server and locating corresponding authorization 
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information for the administration server in the database associated with the authentication 
server. 

Claim 3. (currently amended) The rompnter-readable media APJ of claim 2, wherein 
identifying the administration server comprises examining an encrypted ticket accompanying the 
request, said ticket identifying the administrator. 

Claim 4. (canceled). 

Claim 5. (currently amended) The computer-readable media APi of claim 1 , wherein performing 
the specified action comprises reserving the namespace with the authentication seryerjo prevent 
an unauthorized user from obtaining an account in the namespac e, said request including a 
A n ™\ n nam* associated with the namespace, and farther comprising : 

r* n ,,est^ r hv the authentication servrr riomnin i nformation for the domain name 
inHnHeri in the verified request from a domain name service; 

determining, bv the authenticatio n server, authority of the administration server to reserv e 
the namesnace bv c^rW the rec ei v ed domain info rmation with the verified request; and 

r^rvin p the namesn^e only if the ^ ministration server is authorised to make the 
req uest, and reserve the namespac e. 

Claim 6. (currently amended) The computer-readable media AW of claim 5, wherein reserving 
the namespace comprises creating an administrator account associated with the administration 
server to manage the namespace. 

Claim 7. (currently amended) The computer-readable media AP4 of claim 1, wherein 
performing the specified action comprises releasing the namespace to allow any user to obtain an 
account in the namespace. 

Claim 8. (currently amended) The computer-readable media AW of claim 1, wherein performmg 
the specified action comprises maintaining and editing a namespace administrator list. 
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Claim 9. (currently amended) The ^.t^dAle media AM of elaim 8, wherein editing a 
namespace administrator list comprises adding at least one administrator to the namespace 
administrator list. 

Claim 1 0. (currently amended) The rompnter-re,adable media API of claim 8, wherein editing a 
namespace administrator list comprises deleting at least one administrator from the namespace 
administrator list. 

Claim 1 1 . (currently amended) The ^m^ter-readable media AP4 of claim 1 , wherein 
performing the specified action comprises editing one or more user accounts in the namespace. 

Claim 12. (currently amended) The compeer-readable media AP4 of claim 1 1, wherein editing 
one or more user accounts in the namespace comprises creating at least one user account in the 
namespace. 

Claim 13. (currently amended) ™- ^..tar-readable media AW of claim 1 1 > wherein editing 
one or more user accounts in the namespace comprises resetting a namespace password 
associated with at least one of the user accounts. 

Claim 14. (currently amended) The ^r^r.raadahle media API of claim 1 1, wherein editing 
one or more user accounts in the namespace comprises removing at least one of the user accounts 
from the namespace. 

Claim 15. (currently amended) ™» ^pn^-r-readable media APt of claim 1 1 , wherein editing 
one or more user accounts in the namespace comprises editing a profile associated with at leas! 
one of the user accounts. 

Claim 16. (currently amended) tk. gomey ^-readable media API of claim 11, wherein editing 
one or more user accounts in the namespace comprises changing a sign-in name associated wiih 
at least one of the user accounts. 



PAGE 5114 ' RCVD AT 5/9/2006 3:26:56 PM [Eastern Daylight Time] ' SVR:USPT0-EFXRF-1/13 * DNIS:2738300 ■ CSID:3145881 357 • DURATION (mm-ss):04-20 



P. 06/14 



5 MS#1 58496.01 (4964) 

PATENT 

Claim 17. (currently amended) The computer-read able media API of claim 1 . wherein 
performing the specified action comprises: 

listing user accounts associated with the namespace; and 

evicting one or more of the user accounts from the namespace. 

Claim 1 8. (currently amended) The r.nmpnter-readable media API of claim 17, wherein 
performing the specified action further comprises permitting a user of the evicted user account to 
contest the evicting of the evicted user account. 

Claim 19. (currently amended) The comEUter = readable media API of claim 1, wherein 
performing the specified action comprises auditing actions within user accounts associated with 
the namespace. 

Claim 20. (currently amended) ™- gom^utgirrcadable media API of claim 1, further 
comprising returning a success response from the authentication server to the administration 
server if the request was received, the administration server was verified, and the specified action 
was performed successfully. 

Claim 21 . (currently amended) The ™mpnt*r.r ea dable media API of claim 1, wherein 
performing the specified action comprises returning an error response from the authentication 
server to the administration server if the request was received, the administration server was not 
verified, or the specified action was performed unsuccessfully. 

Claim 22. (currently amended) The ^mpnter-readable media API of claim 1 , wherein the API 
is based on a simple object access protocol (SOAP). 

Claim 23. (currently amended) The renter-readable media API of claim 1, wherein the 
instructions are computer-executable instructions stored on one or more tangible computer 
readable storage media. 
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Claim 24. (currently amended) A method for delegating at least one administrative task from a 
first system to a second system, said method comprising: 

maintaining, by a first system, a database of one or more namespaces, said first system 
being connected to a second system via a data communication networ ked second syste m 
providing tt porvioo associated with a nomoapaw t u u uu u i ui or o u aorn nn the d ata communication 
u ul w or k, said databa o o including the nameapaoc a oa ooiatcd withtho cecond system ; 

^SSSiatja g at least one Q fJbS namespaces with the second system, said second system 
providing a service associated v fi th jbe abated namespace to onepr more users on the data 
communication ^twnrk. said HnraW maintai ned by th e firs t system including the namespace 
fls<;Ar,iat.ed with the second system; 

receiving a call from the second system by the first system, said call providing a request 
that at least one routine be performed to implement a desired administrative task for managing 
the namespace associated with the second system databas e; and 

executing the routine, by the first system, in response to the call received from the second 
system to implement the administrative task. 

Claim 25. (original) The method of claim 24 wherein the routine comprises an application 
programming interface (API) for performing the administrative task. 

Claim 26. (original) The method of claim 25 wherein the API is implemented according to a 
simple object access protocol (SOAP). 

Claim 27. (original) The method of claim 24 further comprising generating an error response if 
an error occurs during execution of the routine. 

Claim 28. (original) The method of claim 24 wherein the first system is a multi-site user 
authentication system and the second system is an affiliate selected from the group consisting of 
an application service provider (ASP), an Internet service provider (ISP), a namespace owner 
(NSO), and a namespace provisioning (NSP) partner. 
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Claim 29. (original) The method of claim 24 wherein the administrative task comprises 
reserving at least one of the namespaces to prevent an unauthorized user from obtaining an 
account in the reserved namespace. 

Claim 30. (original) The method of claim 29 wherein the second sy stem is associated with an 
ASP and wherein reserving at least one of the namespaces comprises reserving, by the ASP, at 
least one of the namespaces on behalf of a customer of the ASP. 

Claim 3 1 . (original) The method of claim 24 wherein the administrative task comprises 
releasing at least one of the namespaces to allow any user to obtain an account in the released 
namespace. 

Claim 32. (original) The method of claim 24 wherein the database maintained by the first 
system stores a list of namespace administrators corresponding to at least one of the namespaces 
and wherein the administrative task comprises editing the namespace administrator list. 

Claim 33. (original) The method of claim 24 wherein the administrative task comprises editing 
at least one user account in at least one of the namespaces. 

Claim 34. (original) The method of claim 33 wherein the administrative task comprises 
changing a sign-in name associated with one or more of the user accounts. 

Claim 35. (currently amended) One or more taagfele computer readable gtoiage media having 
puter-executable instructions for perforating the method recited in claim 24. 



com 



Claim 36. (currently amended) A taaga*» computer-readable storage medium having 
computer-executable components for delegating at least one administoative task from an 
authentication system to at least one administration system, said components comprising: 

an identifier component for maintaining a database of one or more namespaces, said 
database being maintained by an authentication system, said authentication system being 
connected to an administration system via a data communication network, said authentication 
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s ystem associating at least on* of the namesoar^ wjth said administration system, said 
administration system providing a service associated with a^eftstWthe associated 
namespace namespaees to one or more users on the data communication network; 

an interface component for receiving a call from the administration system by the 
authentication system, said call providing a request that at least one routine be performed to 
implement a desired administrative task for managing the namespace associated with the 
administration system databas e; and 

an operation component for executing the routine, by the authentication system, in 
response to the call received from the administration system to implement the administrative 
task. 

Claim 37. (currently amended) The tangible computer-readable storage medium of claim 36, 
wherein the interface component comprises an application programming interface for 
implementing the routine. 

Claim 38. (currently amended) The tangible computer-readable stoj^ge medium of claim 36, 
wherein the routine comprises computer-executable instructions for: 

reserving at least one of the namespaces to prevent an unauthorized user from obtaining 
an account in the reserved namespace; 

editing one or more user accounts in the namespace; 

maintaining and editing a namespace administrator list; and 

releasing the reserved namespace to allow an unauthorized user to obtain an account in 
the namespace. 

Claim 39. (currently amended) A system for authenticating at least one user of a namespace 

service, said system comprising: 

one or more user databases storing authentication information; 

an authentication server for communicating with the database via a data communication 
network; and 

an administration server for communicating with the authentication server via the data 
communication network, said administration server being associated with a namespace and 
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providing the namespace service, said administration server being responsive to an administrator 
for issuing at least one request to said authentication server, said request specifying at least one 
action for managing the namespace d atabase to be performed in relation to the namespace 
service. 

Claim 40. (original) The system of claim 39, further comprising a nexus database storing 
administration information selected from a group consisting of an affiliate list, namespaces, the 
location of the user databases, and administration server information. 

Claim 41. (original) The system of claim 39, wherein the authentication information comprises 
a login and password associated with each user. 

Claim 42. (original) The system of claim 39, wherein the administration server and 
authentication server communicate on the data communication network via a simple object 
access protocol (SOAP). 

Claim 43. (original) The system of claim 39, wherein the administration server is associated 
with an affiliate selected from a group consisting of an application service provider, an Internet 
service provider, a namespace owner, and a namespace provisioning partner. 

Claim 44. (original) The system of claim 39, wherein the user obtains a namespace identifier 
from the authentication system via the administration server. 

Claim 45. (original) The system of claim 44, wherein the namespace identifier is an electronic 
mail address associated with a user account with the authentication system. 
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